loading
Loading content
loading
Utilities
Authenticated Route53 hosted-zone inventory.
overview
aws-route53-zones sits at the start of cloud DNS recon: aws-credentials in, hosted-zone list out as FILE and FOLDER, then subdomain or resolver nodes.
Run it when you have authorized AWS access and need the domains Route53 manages, including private or staging zones that public certificate transparency never lists.
Unlike subfinder, it does not enumerate names under a domain. It reads the account zone set and hands those apex domains to the next discovery step.
use cases
Pull every Route53 hosted zone to start an attack-surface workflow from the domains the account actually owns instead of a guessed list.
Extract all zones to build a current inventory of managed domains for an asset register or a scoping document.
Hand the zone list to subfinder or assetfinder so discovery runs across the full set of owned domains in one pass.
List the zones still configured in Route53 to spot domains that are no longer in active use but remain resolvable and exposed.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| aws-credentials | FILE | · | AWS credentials contaning a User with privileges to list AWS Route53 hosted zones. |
Showing key inputs. aws-route53-zones exposes 1 inputs in total.
example
# aws-route53-zones: list hosted zones in the configured accountaws-route53-zonesexample.com. ZAAAAAAAAAAAAA publicapi.example.com. ZBBBBBBBBBBBBB publicinternal.example.com. ZCCCCCCCCCCCCC privatestaging.example.com. ZDDDDDDDDDDDDD publicdev.example.com. ZEEEEEEEEEEEEE publicguidance
Use aws-route53-zones when you have authorized AWS access and need the real domains the account owns. It reads Route53 config; it does not enumerate subdomains. Feed zones into subfinder or a resolver next.
Multi-provider cloud asset listing, including DNS. Broader than this Route53-only read.
Unauthenticated hunt for exposed cloud resources. Different angle from an account zone inventory.
Passive subdomain discovery. Run after zones are listed to expand each domain.
faq
related
Spider a URL and return a wordlist for password crackers.
Wordlist and mined-word subdomain permutation.
Import, export, and upsert workflow data against an Airtable base.
Decode Android APK files into smali sources and resources.
Check a file's values against conditions and exit with a matching code.
Extract file or folder lines by START_LINE,END_LINE batch range.
AWS credentials feed aws-route53-zones, which lists the account's hosted zones and passes them to subfinder, writing the discovered subdomains as output.
Facts on this page come from the live Trickest tool library.